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PAGE 02 PHUPC~r-»*«/. -<it " p T nfl. l.f A »' 

RUETIAA/NSACSS FT GEORGE G MEAOE MD//NS0C/I3/SIP0/V15// 

RUCNFB/FBI WASHINGTON DC//CITAC// 

RUEKJCS/SECOEr WASHINGTON DC//ASD/C3I/0USU(P)P5// 

RUEAlIA/CIA WASHINGTON DC//CTG/DI/OTI/IWT// 

RUEKD I A/0 IA WASHINGTON DC//TWI/DS/J2J/SY/DAJ2A// 

RUQVKJW/JC2WC SAN ANTONIO TX//DR/OV/OP/PO// 

RHHMUNA/USCINCPAC HONOLULU HI//J3/J39// 

BT 

4 S C H ' i T l>ih U MCAH 

MSGID/GENADMIN/J—39/FEB 98// 

SUBJ/USCINCPAC SITREP 01 FOR UNUSUAL COMPUTER INTRUSION 
ACTIVITY (U)// 

POC/USCINCPAC INFORMATION OPERATIONS OIVISION/OSN 477-2593// 

1. (U) THIS SITREP IS A CONSOLIDATED USPACOM RESPONSE. 

2. ""I WML UNMAN) BACKGROUND: SINCE 3 FEB* USPACOM HAS EXPERIENCE L 
AT LEAST TWO COMPUTER INTRUSIONS THAT SEEM TO BE RELATED TO THE 
ONGOING UNUSUAL COMPUTER INTRUSION INVESTIGATION. THESE HAVE A CL 
BEEN REPORTED VIA SERVICE AND DISA CHANNELS. 

A. — CO/RCL UK/CAH) DISA-PAC DNS SERVER COMPROMISED. UNKNOWN 


MALICIOUS CODE INSERTED. ACTION TAKEN 


1(b) (1). (b) (3) 10 USC § 130e. 18 USC § 798(a)! 































PAGE 03 RUHPS3G7654 SECRET REL UK 

(AWAITING FUTHER GUIDANCE FROM DISA. INVESTIGATION 


CONTINUING. OPERATIONAL IMPACT: 

B. T 3/RC. U *( j f C if i.l' l ) NAVAL STATION PEARL HARBOR. WEB SERVER 

PENETRATED. PERPETRATOR WAS IN THE PROCESS OF INSERTING MALICIOUS 

riaiiiwaBcwiimawaitiiainiii 


(b) (1), (b) (3) 10 use § 130e, 18 USC § 798(a) 


~{&)MV(&)(3) tousc$uoe. !8 USC 5 79*1 


CODE WHEN SYS ADMIN IDENTIFIED THE ACT DURING 
ACTION TAKEN: 

OPERATIONAL IMPACT: 

3 


(b) (1), (b) (3) 10 USC § 130e, 18 USC § 798(a) 


(b) (1), (b) (3) 10 USC § 130e, 18 USC § 798(a) 


A. ( ‘ l/RCL UK/OAH) OTHER SIGNIFICANT ISSUES: NSTR. 

5. "H C/flCL JK/OAH) POINTS OF CONTACT: NORMAL DUTY HOURS, POC IS 

AFTER DUTY 

HOURS, CONTACT THE COO AT DSN 477-7227// 

DECL: RADM M03LEY, J-3? REASON: 1.5(A)? DECLON: 11 FEB U8 
BT 


(b)(6) 


U 7654 
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